Solving search problems by strongly simulating quantum circuits 
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Simulating quantum circuits using classical computers lets us analyse the inner workings of quan- 
tum algorithms. The most complete type of simulation, strong simulation, is believed to be generally 
inefficient. Nevertheless, several efficient strong simulation techniques are known for restricted fam- 
ilies of quantum circuits and we develop an additional technique in this article. Further, we show 
that strong simulation algorithms perform another fundamental task: solving search problems. Ef- 
ficient strong simulation techniques allow solutions to a class of search problems to be counted and 
found efficiently. This enhances the utility of strong simulation methods, known or yet to be dis- 
covered, and extends the class of search problems known to be efficiently simulable. Relating strong 
simulation to search problems also bounds the computational power of efficiently strongly simula- 
ble circuits; if they could solve all problems in P this would imply the collapse of the complexity 
hierarchy PCNPC#P. 



Ever since Shor famously showed that a quantum com- 
puter can factorise numbers super-polynomially quicker 
than the fastest known classical algorithm I], researchers 
have sought methods to efficiently simulate quantum cir- 
cuits using classical computers. This is partly to nar- 
row down where the power of quantum computers may 
arise and partly to understand the operation of quan- 
tum algorithms. Simulation is typically divided into two 
types, weak and strong [31 [3J. Weak simulations sam- 
ple an outcome of a measurement on a quantum circuit 
with the correct probability distribution. Strong simula- 
tions, which we focus on, go further, precisely calculating 
probabilities in this distribution. 

The strong simulation of an arbitrary quantum circuit 
is widely believed to be inefficient, even using a quantum 
computer; in the language of computational complexity, 
it is #P-hard [2]. However several efficient methods are 
known for strong simulation using a classical computer, 
provided the process to be simulated is sufficiently re- 
stricted For example, Gottesman showed that 
stabiliser circuits acting on computational basis states 
admit efficient strong simulation if measurements are re- 
stricted to that basis gHI] . Valiant demonstrated a simi- 
lar result for circuits comprising matchgates [S] . This was 
later related to free Fermion systems and generalised to 
Gaussian circuits [5Hl3j . Further, utilising techniques for 
contracting tensor networks, Markov and Shi developed 
a method for efficiently simulating circuits composed of 
arbitrary gates arranged in a tree- like geometry [22] . 

In this article we exploit that every strong simulation 
of a quantum circuit is represented by the contraction 
of a tensor network. We discuss how individual gates 
are represented by tensors and the pattern of connec- 
tions between the tensors follows directly from the cir- 
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cuit. Contracting the resulting tensor network returns 
the strong simulation result. An advantage of the tensor 
network representation is that it acts as a unifying lan- 
guage for strong simulation algorithms, and we use it here 
to demonstrate that concatenations of tree-like circuits 
followed by Gaussian or stabiliser circuits are efficiently 
strongly simulable. Another advantage of using the lan- 
guage of tensor network contraction is that it applies be- 
yond quantum circuits, to classical Boolean circuits |25j 
and their generalisation to stochastic circuits [2"rj] . 

Strong simulation algorithms efficiently perform re- 
stricted forms of what is thought to be a generally in- 
efficient task. It is then worth investigating whether 
they might efficiently solve subsets of other generally dif- 
ficult problems. In this regard, Aaronson and Gottes- 
man showed that solutions to problems in the class ©L 
(parity-L) [27] could be embedded in the probabilities 
of stabiliser-circuit measurement outcomes and thus effi- 
ciently solved using methods to simulate such circuits [5] . 
Moreover, following Valiant, it has been shown that 
matchgate circuit simulators, and the related holographic 
algorithms, provide an efficient means to solve problems 
for which none were previously known |28| . 

This article is similarly motivated; we show that every 
efficient strong simulation technique provides a method 
for efficiently solving a class of search problems. We 
do this by constructing, for any given search problem, 
circuits that check solutions to the problem and whose 
strong simulation counts and reveals solutions to the 
problem. A search problem is then efficiently solvable 
if these strong simulations can be performed efficiently. 

The importance of search problems stems from the 
wide variety of tasks that can be phrased in terms of 
them [29) . Further, by connecting strong simulation to 
search problems we highlight the relationship between 
strong simulation and well-known complexity classes: the 
problems decided by efficiently strongly simulable circuits 
must form a proper subset of P, otherwise P = NP = ffP. 
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Results 

Search problems. A search problem is a collection 
of instances, each represented by a bitstring x and asso- 
ciated with a set of solutions S(x) [29]. Each solution 
w 6 S(x) is also represented by a bitstring. A search 
problem is efficiently solvable if, for every instance x, it 
is possible to find a solution w € S(x) or determine none 
exists in a time < Here p is some polynomial and 

| a; | is the length of bitstring x. This is consistent with 
the general notion of efficient, meaning that a task can 
be completed in a time upper-bounded by a polynomial 
in the size of its description. In what follows, we assume 
that solutions can be efficiently checked using a classical 
computer and efficiently described. 

Searching by counting. Our approach relies on the 
reduction of a search problem to a counting problem |29j . 
Each instance of the counting problem, described by 
(x,n,w'), is to calculate #(x,n,w') the number of so- 
lutions to x that are of length n and end in some bit 
pattern w' . 

The reduction, depicted in Fig. [T] is performed as 
follows. For a given x with Null the zero-length bit- 
string, calculate #(x, n,Null) for n = 1. Repeat this for 
n = 2, 3, . . . until either a non-zero value of n, Null) 
is obtained or n reaches some maximum value n max . If 
"max is reached without obtaining a non-zero value, then 
no solution exists. If instead a non-zero value is found 
for some n = |w| m ; n < n max , then a length- |u>| m i n solu- 
tion exists. To find one such solution, complete the fol- 
lowing binary search. Evaluate |u>| m in,0). If this is 
non-zero, calculate |iu| mm) 00). Otherwise, calculate 
jj=(x, | | mini 01)- Continuing in this way, a length- |iu| mm 
solution to x is inferred after a total of 2|w| m i n counts. 

Since solutions are efficiently described, we may choose 
"■max < an d this results in two properties: first, x is 

solved by calculating #(x, n, w') for < p{\x\) values of n 
and w'\ second, for these n and w' we have \ (x,n,w')\ < 
p{\x\). It follows that if the counting problem is efficiently 
solvable then so is the search problem. 

Counting by simulating. To highlight the compu- 
tational difficulty (#P-hardness) of strong simulation, 
researchers have constructed quantum processes with 
outcome probabilities encoding the solutions to hard 
counting problem instances |2{. We encompass such 
approaches by constructing a quantum process whose 
outcome probabilities embed the solution to an arbi- 
trary counting instance (x, n, «/). Our motivation, unlike 
in [5] , is not to suggest the general inefficiency of strong 
simulation but to take specific cases in which it is effi- 
cient and transfer this efficiency to solving the embedded 
counting instance. 

We now outline the quantum process, leaving the de- 
tails of its construction to the methods section. The 
quantum process consists of an input state, a quantum 
circuit and a measurement. Each possible solution w of 



length n is represented by an iV-qubit product input state 
\w) = \Q)^ N - n ^\w n ) ••>!>, (1) 

where {|0), |1)} is the computational basis. Input states 
are evolved according to a quantum circuit C x ^ n com- 
prising M gates, with each gate gk acting on a bounded 
number of qubits. The unitary operator representing this 
circuit is 

M 

C x ,n = ]^[ 3fc ( 2 ) 
fc=l 

Finally, a measurement is performed, defined by some 
projectors {IT, 1 — 11} with outcomes {yes, no}. Here we 
choose fl to project onto a computational basis state of 
the last qubit 

H = l a ® • ■ • ® la ® |1><1|- (3) 

The circuit C x ^ n is devised such that if w € S(x) then 
C Xjn \w) is in the range of fl, otherwise it is in the range 
of 1 — II. We call a circuit with this property a solution- 
checking circuit: if \w) is inputted into C X) „ then mea- 
suring the output returns yes with probability equal to 
unity if w £ S(x), and otherwise zero. Then, by linearity, 
inputting a superposition 

\W{n 1 w'))=N \w) 

= |o)®< JV - n) |+)® (B - n ' ) K') • • • K), (4) 

into C Xtn returns yes with probability V = 
Af 2 #(x,n,w'). Here W(n,w') = {w"w' : \w"w'\ = n] 
is the set of length- n bitstrings with suffix w' , 
Af = 2'" ~™'/ 2 is a normalisation constant with 

n / = K|and|+) = (|0) + |l))/v^. 

We call this process a quantum counter since its out- 
come probabilities encode #(x,n,w') and thus (x,n,w') 
is solved by its strong simulation. It is essential that 
the simulation is strong, as the prefactor J\f 2 means that 
probabilities must be calculated to a precision exponen- 
tial in n. Generally, an exponential number of weak sim- 
ulations would be required to achieve this precision [5] [3] . 

To ensure no inefficiencies are hidden in the construc- 
tion of the counters, we insist that for every (x, n, w') 
a description of the counter can be generated in a time 
< p{\(x,n,w')\). A family of counters obeying this re- 
striction is called (polynomial-time) uniform. The uni- 
formity of a family of counters is ensured if we impose 
two conditions on the family {C Xt7l } of solution-checking 
circuits on which they are based: circuits in the family 
are of polynomial size, i.e. N,M < p(n) for each C x>n , 
and the family is uniform, i.e. a description of each C Xt1l 
can be generated in a time < In this article 

all families of counters are uniform and all families of 
circuits are polynomially-sized and uniform. 

Given these restrictions, a search problem is efficiently 
solvable if there is a family of counters that are also effi- 
ciently strongly simulable. An efficient strong simulation 
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method will efficiently strongly simulate some families of 
counters, and thus efficiently solve some counting and 
search problems. This is one of the main implications of 
our formulation. 

In the remainder of this article we will identify count- 
ing and search problems efficiently solved by known and 
newly-devised strong simulation methods. However, we 
first describe the tensor network representation of strong 
simulation, which provides a convenient language for dis- 
cussing these strong simulation methods. 

Counting by contracting. The strong simulation of 
a quantum counter reduces to calculating the probability 

V = {W(n,w')\ClJ\C x , n \W{n,w')). (5) 

The iV-qubit states and operators appearing on the right 
hand side of Eq. Q are made up of single-qubit states 
and operators acting on a bounded number of qubits, 
according to Eqs. Q-Q. As is common in quantum 
mechanics, we may represent these states and operators 
by vectors and matrices, respectively (see methods). In 
this way, the operation II and each of the M operations 
that constitute C x<n is described by a matrix of bounded 
size. Similarly, the initial product state \W(n,w')) is 
described by N vectors of bounded size. Thus there is 
a set of 2(M + N) + 1 tensors that together efficiently 
describe the quantum process. Contracting these tensors 
together in the correct arrangement to obtain Eq. ([5| 
reveals #(x,n,w'). Hence we call the tensor network, 
illustrated in Fig. [2] a tensor counter. 

A family of tensor counters constructed in this way in- 
herits its uniformity from the family of quantum counters 
on which it is based. In this representation then, a search 
problem and its corresponding counting problem are ef- 
ficiently solvable if there is a family of tensor counters 
that are efficiently contractable. This is ensured if each 
counter can be contracted in a time < p(n). 

Identifying efficiently solvable search problems. 
We now discuss cases in which counters of the type in 
Fig. [2] are efficiently contractable and thereby identify 
efficiently solvable counting and search problems. Since 
the other parts of the counters are fixed, the efficiency 
of their contraction depends only on the family {C x ^ n } 
of solution-checking circuits. This leads to the follow- 
ing result: a search problem is efficiently solvable if its 
solutions can be checked by restricted circuit families, 
specifically circuit families which correspond to efficiently 
contractable counters. 

Before we identify such circuit families, let us comment 
on the applicability of our results to various circuit types. 
We have so far outlined one approach to constructing a 
family of tensor counters of the form shown in Fig. [2] 
based on a family {C x ^ n } of quantum solution-checking 
circuits. However, as we show in the methods section, 
there are other equally valid approaches. As an example, 
we describe an explicit construction for a family of tensor 
counters based on a family {C X:U } of classical Boolean 
solution-checking circuits. Tensor counters can also be 
constructed from circuits {C XtU } within other models of 



computation. For example, stochastic circuits [25J and 
atemporal Boolean circuits [25] , both of which are a gen- 
eralisation of Boolean circuits. 

Thus what follows applies to tensor counters built from 
solution-checking circuits {C x „} within any such com- 
putational model. This increases the number of routes 
through which one may devise a family of efficiently con- 
tractible counters, and demonstrate the efficiency of find- 
ing and counting solutions to a search problem. For nota- 
tional convenience, we treat the solution-checking circuit 
C XyU and the tensor network representing it as synony- 
mous, only making a distinction when needed for clarity. 
Methods for contracting tensor networks are divided into 
two types; geometric and algebraic. 

Contracting geometrically. Geometric methods se- 
quentially perform a contraction while carefully choosing 
the contraction sequence to avoid storing or manipulating 
large tensors. Accordingly, when discussing these meth- 
ods, the only concern is with the structure of the counter. 
The counter inherits the same structure as C XtU up to a 
bounded increase in the size of the tensors, as illustrated 
in Fig. [3|a) . Therefore the efficiency of geometric meth- 
ods depend solely on the geometries of {C XiTl }. 

As an example of a geometric contraction strategy, con- 
sider the case where each of the circuits in {C x ^ n } has 
a simple tree structure. The counters can then be ef- 
ficiently contracted by starting at the branch tips and 
moving inwards, as indicated in Fig. [3]ja). Thus search 
problems are efficiently solvable if their solutions can be 
checked by a family {C X)n } of circuits whose gates are 
arranged in a simple tree structure. Markov and Shi 
generalised this contraction strategy by showing how to 
efficiently contract networks that are sufficiently tree- 
like [22]. Specifically, a family of networks is efficiently 
contractable if each network has a treewidth (a measure 
of how far a network is from being a tree) growing at 
most logarithmically in the number of tensors. It follows 
from our formalism that this same contraction strategy 
efficiently solves any search problem whose solutions are 
checked by a family {C x . n } of circuits with a treewidth 
growing at most logarithmically in n. 

We can immediately apply this result to the problem 
of finding satisfying solutions to a restricted version of 
the Boolean satisfiability decision problem [3D]. For this 
search problem, each instance x describes a Boolean for- 
mula and each solution w is a length-n bitstring repre- 
senting a set of n Boolean variables which satisfy this 
formula. Provided we restrict ourselves to formulas rep- 
resented by circuits {C K , n } with a treewidth growing at 
most logarithmically in n, solutions are checked using 
such restricted circuits. Hence such restricted SAT-based 
counting and search problems are efficiently solvable us- 
ing our approach. 

Contracting algebraically. Other contraction strategies 
rely on algebraic relations to simplify or fully contract a 
tensor network; in this case it is not only the geometry 
of the network that is important, but also the compo- 
nents of the tensors. Two prominent examples are the 
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methods of simulating stabiliser [U [7] and Gaussian cir- 
cuits [12l US] , the latter of which encapsulates matchgate 
and free Fermion circuits [8HTT] . Each is based on a group 
of operators which, under the action of a restricted cir- 
cuit, maps to another operator in the group. Algebraic 
relations allow this mapping to be calculated efficiently. 

Specifically, for either a stabiliser or Gaussian circuit 
C x n , the evolved projection operator (7| n tlC x ^ n , appear- 
ing in the counter shown in Fig. [2j can be found in a time 

< p(n) [7l[T3]. This evolved projector is described by a 
particularly simple form of tensor network with < p(n) 
tensors of bounded size arranged in a linear geometry 
(see methods). This network, called a matrix product 
operator [311 [32] , is illustrated in Fig. [3^b). Using the 
strategy suggested in this figure, the simple geometry of 
the matrix product operator allows the full counter to 
be contracted in a time < p(n). Thus a search problem 
is efficiently solvable if its solutions can be checked by a 
family {C, „} of stabiliser or Gaussian circuits. 

For stabiliser circuits, this has a clear interpretation in 
terms of a known class of decision problems. A decision 
problem is defined as a collection of instances the solution 
to which is either yes or no. The problem is fully spec- 
ified by the set of all yes instances, called the language, 
and the bitstrings describing yes instances are words in 
this language. The class ©L contains every language for 
which it can be decided whether any word is a part of 
that language using a stabiliser circuit acting on compu- 
tational basis states followed by a single measurement in 
that basis |5J EZ] • Using our formalism, it is then efficient 
to count and find words from any language in ©L. 

Our formalism also allows the efficient finding of words 
in languages decided by a Gaussian circuit followed by a 
computational basis measurement in a single qubit. It 
turns out that such languages are trivial; whether or not 
a word is part of the language can be decided by consid- 
ering at most a single bit of the word [53"] . 

Contracting a concatenation. Having presented sev- 
eral strong simulation methods in the unifying language 
of tensor networks, we now show that they can be com- 
bined. We have already shown that evolving II by a sta- 

... [21 

biliser or Gaussian circuit C x ,n returns a matrix product 
operator. In Fig. [3]Jc) we depict how a bounded matrix 

product operator evolved by another circuit C^L leads 
to a network with the same geometry of Cx} n but with a 
bounded increase in the size of the tensors. This means 
it is possible to contract each counter in Fig. [2] in a time 

< p(n) if C xn is a concatenation of a circuit Ci} n with a 
treewidth growing at most logarithmically in n followed 

[21 

by a stabiliser or Gaussian circuit C x , n - Thus we have 
arrived a key result: a search problem is efficiently solv- 
able if its solutions are checked by a family {C X;n } of 
such concatenated circuits. The class of search problems 
of this type was not previously known to be efficiently 
solvable. 

Power of efficiently strongly simulable circuits. 

The above joint algebraic and geometric contraction 



strategy encapsulates each of the three strong simula- 
tion algorithms considered (stabiliser, Gaussian and tree- 
based) and in their combination leads to a new class of 
efficiently simulable quantum circuits. 

It is known that there is a sudden shift in computa- 
tional power when a seemingly innocuous gate is added to 
the gatesets of either Gaussian or stabiliser circuits: Since 
they are efficiently simulable, (uniform and polynomially- 
sized) Gaussian or stabiliser circuits followed by a com- 
putational basis measurement cannot be used to decide, 
even with a bounded error, any languages outside the 
complexity class P, where P is the class of decision prob- 
lems solved efficiently and without error using a classical 
computer. However, if SWAP [TBJ or the 7r/8-gate |34j . 
respectively, are added to either gateset, then either can 
decide problems in BQP. This is the class of decision 
problems solved efficiently and with a bounded error us- 
ing a quantum computer. 

The shift is enhanced by both our concatenation of 
simulation techniques and our algorithm for searching 
by simulating. The former narrows down where the shift 
may take place: allowing bounded-size, but otherwise ar- 
bitrary gates, in a limited geometry before Gaussian or 
stabiliser circuits does allow the deciding of languages 
beyond P with bounded error. The latter highlights the 
size of the shift: we expect the languages that can be de- 
cided without error using Gaussian, stabiliser, tree-like 
circuits, or their concatenation followed by a computa- 
tional basis measurement not only to be a subset of P, 
but a proper subset. To see why this is expected, con- 
sider the opposite to be true. This would imply that 
all efficiently-checkable search problems can be checked 
using Gaussian, stabiliser, tree-like circuits, or their con- 
catenation followed by a computational basis measure- 
ment. Using our formulation, it would then be possible 
to efficiently count and find solutions to all efficiently- 
checkable search problems. Note that each instance of a 
problem in $P (NP) corresponds to counting the number 
of solutions (deciding whether there is a solution) to an 
instance of an efficiently-checkable search problem [29]. 
Thus the complexity hierarchy P C NP C #P would 
collapse to an equality. 



Discussion 

Our results reveal a hitherto unknown consequence 
of algorithms that efficiently simulate quantum circuits; 
each allows for the efficient solving of a class of search 
problems. This applies to every strong simulation tech- 
nique, implemented by any device, classical or quan- 
tum. For well understood methods such as stabiliser cir- 
cuit simulation algorithms, this confirms what is already 
known. For methods whose computational power is less 
well understood, this demonstrates the efficient solubility 
of several classes of search problems based on how their 
solutions are checked. To our knowledge, this extends 
the class of counting and search problems known to be 
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efficiently solvable. Further, the most general technique 
considered in this article corresponds to a novel combi- 
nation of strong simulation methods. Hence this article 
widens the class of efficient strong simulation methods 
and adds to their applicability. 

Methods 

Generic quantum counters. Here we give an 
explicit approach to constructing a quantum solution- 
checking circuit C Xtn used to form a quantum counter. 

For every instance x of an efficiently-checkable search 
problem a solution of length n can be checked in time 
< p(|x|) using a classical computer. Thus there is a clas- 
sical algorithm that decides the language C — {(x,w) : 
w e S(x)} in time < p(\(x,w)\). It is then possible to 
construct a family of Boolean circuits {C m } with the fol- 
lowing properties |35j : each C rn takes inputs (x,w) with 
= m and outputs logical-one if (x,w) £ C, and 
otherwise logical-zero; it comprises < p(m) AND, OR 
and NOT gates [34]; and it is constructible in a time 



< p{rn) . Hardwiring x into C m leaves a Boolean solution- 
checking circuit C x>n that takes bitstrings w of length 
n and outputs logical-one if w G S(x), and otherwise 
logical-zero. 

The Boolean circuit C Xjn can be made reversible in 
time < p(|a;|,n) with only < p(|x|,n) additional gates 
and < n) additional ancilla bits, each initially set to 
zero [SHrlUE]- The standard mapping between reversible 
classical and unitary quantum circuits [33] leads to a 
quantum circuit of the desired form. This circuit is gen- 
erated in time < p(\x\, n) and comprises < p(\x\,n) gates. 
So the approach leads to polynomially-sized uniform fam- 
ilies of quantum solution-checking circuits, and hence a 
uniform family of quantum counters for the search prob- 
lem. 

Tensor counters from quantum counters. Here 
we describe how the expression for the probability V in 
Eq. ([5]) is replaced by the contraction of a uniform tensor 
network. Other descriptions of how to represent quantum 
circuits by tensor networks can be found in Refs. [131122) . 

To begin, insert Eqs. Q-fi} into Eq. Q to obtain 



- /nl®( JV - r 0, 



7> = <0| 



+ 



(n-n')i.J 



'A\(fl9i]m\(l[9k) 

\k=M / \fe=l / 



10} 



<8>(iV-n) 



H»-»')u„' 



(6) 



To rewrite this as a tensor network contraction, first 
replace the states and operators |0), |1), |+), {gt} and 
|1)(1| appearing in Eq. Q by their corresponding tensors 
[0], [1], [+], {[g k ]}, and Specifically, represent 

each single-qubit state \ip) by the tensor [ifj] with 2 com- 



ponents 



[il I labelled by an index i\ = {0, 1}. 



To represent the dual of a state, take the conjugate trans- 
pose. Further, represent each TV'-qubit operator O by the 
tensor [O] with 2 2N components 



[0}°» 



(i N >\ ■ ■ ■ (ii\0\o N >) ■ ■ ■ |oi), 



labelled by 27V' indices, where Oj = {0, 1}. After this 
replacement, write a joint summation (contraction) over 
every pair of indices corresponding to an input and out- 
put connected by the expression in the right hand side of 
Eq. (6j). 

It follows from above that the mapping can be per- 
formed in a time < p(\(x, n, w')\). Thus a uniform family 
of quantum counters maps to a uniform family of tensor 
counters. 

Beyond quantum circuits. Here we describe con- 
ditions on the tensor network representing C XtTl , which 
appears in the counter shown in Fig. [2] The only require- 
ment needed to ensure the contraction of the counter re- 



turns the desired value of V is 

]T |[^ n ]°- 0luo "- O2l | 2 = 



1 to G S(x) 
otherwise 



(7) 



where [C^n] is the tensor representing C x ^ n . In fact, it 
is not necessary for [C XjIi ] to have the same number N 
of output indices as input indices. This gives us the free- 
dom to consider a tensor network that does not represent 
a quantum circuit, but nevertheless whose contraction re- 
turns a tensor [C X)n ] satisfying Eq. ([7|. 

Counters based on Boolean circuits. Here we 
give an explicit approach to constructing a tensor counter 
built from a classical Boolean circuit. 

In our construction of a quantum counter, we showed 
how to construct a solution-checking Boolean circuit C Xj „ 
for any solution-length n and instance a; of a given 
search problem. The circuit can be generated in a 
time < and comprises < p(|x|,n) bounded- 

size gates. It implements the binary switching function 
f x , n ■ {0,1}™ -+ {0,1} where f x>n {w) is 1 if w G S(x), 
and otherwise 0. 

To obtain a tensor network representing C K , n , first 
represent each gate implementing the binary function 
gk ■ {0, l}" fc — > {0, l} mk by a tensor with components 



[9kl 



S, 



gk(ik 



where 



and similarly for 



Ok- Next connect the input and output indices of the 
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tensors {[<7fc]} in precisely the same arrangement as the 
circuit. The components of the tensor obtained by con- 
tracting this network are [C x .„] 10 = 8^ n u\ . Again we 
have used the shorthand i — i n ■ ■ ■ i\. This tensor satis- 
fies Eq. ([7]). Thus the network representing C Xtn leads to 
a valid tensor counter of the form shown in Fig. [2] The 
counter is generated in a time < p(\(x,n,w')\) and so 
counters constructed in this way form a uniform family. 

Contracting algebraically. Using the Heisenberg 
picture, stabiliser circuits map a product of Pauli opera- 
tors to another Pauli product [7] . Such a product is rep- 
resented by a particularly simple matrix product opera- 
tor where each tensor is the standard matrix representing 
the corresponding Pauli operator and the internal indices 
have dimension x — 1- With m the number of qubits, 
the projector II = |(l2 — c 2 )l^™ ^ is the sum of two 
Pauli products, and therefore so is Cl n tlC Xyn - Two ma- 
trix product states can be efficiently summed to make an- 



other where the dimension x increases additively [3"Tl 13"!?] . 
Thus C\ n IlC Xt n is represented by a x = 2 matrix prod- 
uct operator. 

Gaussian circuits map generators c M of a Clifford al- 
gebra to a linear combination R^ v c v where is 
calculable in a time < p(m) and v takes 2m values |13j . 
Each c M may be represented by a Pauli product |13j . 
and so C\. n c^C x ^ n by a x — 2m matrix product oper- 
ator. A product of two generators C1C2 is mapped to 
n CiC x>n Gj. tn C2C Xt n, represented by the product of two 
matrix product operators. The result is another matrix 
product operator where the dimension x increases multi- 
plicatively [3T] [32] . In this case the result has dimension 
X = (2m) 2 . Finally, there is a choice of c\ and Ci such 
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FIG. 1: Searching by counting. A solution to a search problem instance x can be inferred from a sequence of a small 
number of counts. In the example shown there is a single solution S(x) = 1001 and each blue circle represents an enumeration 
of solutions to x of length 4 ending in suffix w'. An empty or filled circle indicates that the count returned zero or one, 
respectively. The red dotted line shows the path to the solution inferred from these counts. For the first count (upper most 
circle), w' has zero length, i.e., all solutions of length 4 are counted and we infer there is a solution of this length. For the next 
count w' = w'x = and we infer that solutions must begin with suffix 1. For the third count w' = w^w'i = 01 and we infer that 
there is a solution beginning with suffix 01, and so on. 



(W(n,w')\ &l n ft C x , n \W(n,w')) 




FIG. 2: Tensor counter. A tensor network whose con- 
traction reveals the solution to a counting problem instance 
(x, n, w'). Each shape represents a tensor, and each line leav- 
ing it corresponds to one of its indices. A connection between 
two shapes represents a contraction, or joint sum over the 
corresponding indices. This tensor counter generalises the 
expression in Eq. j5|, written at the top of the figure, for the 
probability of a measurement outcome following a quantum 
circuit. For clarity, tensors representing ancilla bits have been 
absorbed into the network representing the solution-checking 
circuit C x ,n- This circuit may be quantum, stochastic or 
Boolean (shown above). 
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FIG. 3: Contraction strategies, (a) Folding a tensor counter and merging the tensors in each of the blue or red shaded 
regions reduces the counter to a network with the geometry of the solution-checking network C x>n . If C XtU has a tree structure, 
as is shown, then the counter can be contracted efficiently in the order labelled, starting from 1. (b) A Gaussian or stabiliser 
circuit acting on the local projection operator returns a matrix product operator of bounded size. This can be efficiently 
contracted with the initial state in the order labelled, (c) If C x , n is the concatenation of a tree-like circuit followed by a 
Gaussian or stabiliser circuit then the counter may be efficiently contracted in the following way. Firstly, as in (b) , the action of 
the Gaussian or stabiliser circuit returns a matrix product operator. Secondly, as in (a), folding and merging returns a network 
with the same geometry of the tree-like circuit, which may be efficiently contracted. 



